Privacy Policy

1. Data Controller

The controller responsible for processing your personal data is:

LIZY Belgium SRL

Place Eugène Flagey 18, 1050 Ixelles, Belgium

Company number: BE 0747.501.103 (RPM/RPR Brussels)

You can contact us on any data-protection matter at privacy@lizy.be. Where we are legally required to appoint a Data Protection Officer, their contact details will be made available through this Policy.

2. The Personal Data We Collect

Depending on how you use the Portal, we may process the following categories of personal data:

• Identity and contact data, including your name, business contact details and company information.
• Account and verification data, including login details and information used to confirm your professional status.
• Transaction data relating to your use of the Portal and any purchases.
• Communication records, such as correspondence and support requests.
• Technical and usage data, such as IP address, device and browser information, and how you interact with the Portal.

We collect this data directly from you and, where relevant, from third parties such as public registers and verification services, or generated automatically through your use of the Portal.

3. How and Why We Use Your Data

We process personal data for the purposes set out below, each on the legal basis indicated under Article 6 GDPR:

Where we rely on legitimate interests, we balance those interests against your rights and freedoms, and you may object as described in Section 7. Where we rely on consent, you may withdraw it at any time, without affecting processing carried out before withdrawal.

4. Cookies and Similar Technologies

The Portal uses cookies and similar technologies. Strictly necessary cookies, which are required for the Portal to function and to keep it secure, are used on the basis of our legitimate interest. Non-essential cookies, such as analytics and marketing cookies, are used only with your prior consent, which you can give or withdraw at any time through our cookie banner. Further information about the cookies we use is provided in our separate Cookie Policy.

5. Who We Share Your Data With

We share personal data only where necessary and on a confidential basis, with:

• service providers who process data on our behalf, such as IT and hosting, communications, payment, analytics, logistics and professional advisers;
• other parties involved in completing a transaction, where this is necessary to provide our services; and
• public authorities, regulators or other third parties where we are required or permitted to do so by law, or to establish, exercise or defend legal claims.

Our service providers act on our instructions under appropriate data-processing terms. We do not sell your personal data.

6. International Data Transfers

We seek to keep personal data within the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure an adequate level of protection through a lawful transfer mechanism, such as an adequacy decision of the European Commission or the EU Standard Contractual Clauses. You may request further information about the safeguards we apply by contacting us at privacy@lizy.be.

7. Your Rights

Subject to the conditions set out in the GDPR, you have the right to access your personal data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@lizy.be. We may ask you to verify your identity, and we will respond within the period required by the GDPR.

You also have the right to lodge a complaint with the Belgian supervisory authority: the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35 / Drukpersstraat 35, 1000 Brussels, Belgium — contact@apd-gba.be, www.autoriteprotectiondonnees.be.

8. Automated Decision-Making

We do not take decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing. Should this change, we will update this Policy and apply the safeguards required by the GDPR.

9. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Policy. We then retain it for as long as required to comply with our legal, accounting and tax obligations, and to establish, exercise or defend legal claims. When personal data is no longer needed, we delete it or irreversibly anonymise it.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including access controls, encryption where appropriate, and ongoing security measures. In the event of a personal-data breach likely to result in a risk to your rights, we will act in line with our obligations under the GDPR.

11. Is Providing Your Data Mandatory?

Providing the personal data necessary to register and transact on the Portal is required to give you access and to provide our services; without it, we may be unable to do so. Providing any data used for marketing purposes is optional.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will communicate them through the Portal or by other appropriate means, and the updated Policy will show a new effective date.

13. Contact Us

For any questions about this Privacy Policy or our data practices, contact us at privacy@lizy.be.

LIZY Belgium SRL, Place Eugène Flagey 18, 1050 Ixelles, Belgium.